An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 16, 2019 | Aug 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Nov 19, 2019 | Aug 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headers | Sep 24, 2019 | Aug 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-sourceUpgrade perfUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-devel | Sep 30, 2019 | Aug 19, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2019 | Aug 19, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 19, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-ec2-develUpgrade kernel-devel-azureUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2 | Sep 21, 2019 | Aug 19, 2019 |
| Ubuntu | — | Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-165-powerpc-smpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-165-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-31-lowlatencyUpgrade linux-image-4.4.0-1095-awsUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1020-gcpUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-5.0.0-1018-awsUpgrade linux-image-awsUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-5.0.0-1019-raspi2Upgrade linux-image-5.0.0-1023-snapdragonUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1020-gkeUpgrade linux-image-4.4.0-165-powerpc64-embUpgrade linux-image-5.0.0-1022-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1059-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-5.0.0-1019-kvmUpgrade linux-image-4.4.0-1127-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gke-4.15Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-165-genericUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-4.4.0-165-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1123-raspi2Upgrade linux-image-4.15.0-1056-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-165-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.0.0-31-generic-lpaeUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-5.0.0-31-genericUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-4.4.0-165-generic-lpaeUpgrade linux-image-virtual | Sep 3, 2019 | Aug 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub